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METHOD AND APPARATUS POP mqney TRAN5:m5; 

-n&^mt^don T^l^tomcibod^nd^pp^ for fecOitating money tnmsfer 
Tl« im^ is partiorfariy suitiWe for inter-^^ 
5 limited ezchi^ly to this. 

Money tnmsfer services are offered by a mmU,er of organisations, for example 
banl^AeMoneygnunorganisatioii, and the Wesiem Union oiBania Atiansferee 
wishing to transfer money is able to visit a local antfK,rised agem «^ 

moneyfobemadeavailable for collection byatiansfcree at anotl^ra^^ 
I bank, for example, in a different couitiy. 

Ill developing the present invention, it has been appreciated that conventional 
tedmiques snffrar fitmi certain problems: 

0 Identification of Ae transferee. Nonnally. a transferee wiU be required to 

ptoof of identification, for example, a pas^n or dri^^ 
pcmitted to collect the ftnds. However, there are a large mmiber of countries in 
which many people do not holds pas^m or oti«r ofBdally recognisable proof of 
identification. I- cases, money transfer may be limited m postal ,™«fe^ 
Western Union offen. a code-word fecility by which a transferor can provide a code 
wonl witi, the fatitial transfer mstructions. TTie transferee is required to present a 
maichmg code word mstead of presenting proof of identification, 
(u) Security. I^culariy when a code word is used. d«re is a risk of the 
tn««rferee. or od«:r parties invoh^ m the money tnmsfer p«^ 
It win be appredaied that. e^K^rfally m cemm co^ 

commonplace, and difficuh to ccmtrol Ihmi o«^ h. general, tin: 

tiansferee. and ti« bank staff fa fl,e commy of tfie transferor and the tran^ 

have access to tf« code word and sufficient o4er mformation to collect die fonds and 

10 complete ti^tiansaction (since no proof of identity is required). Sudi fiand is veiy 
difficult to delect and to prevent. 

TO A«™Oro»taft™„ic..o«e.>.i,ybnn«ioolsp.«^ 
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paiticuhiiy whra imfiuiuliar pionunciatioii is involved, or if two people are not folly 
conversant in the same language. For example, if a the name of the transfeiee is 
mis^elt, then it may be impossible for die conect transferee to collect the fimds even 
on presentation of proper id e mifica t i M i. Such a common error can cmly be corrected 
by the transferor conq>Iahnng to die transfer organisaticm, when he is notified of the 
non-ddivery by die transferee; die fiill transfer details have to be taken again from die 
transferor to attenqpt a farther tnmrfer. 

The present invention has been devised bearing die above problems in mind. 

Broadly qi^aking, a first aspect of die invention is to provide d^ transferor widi 
a secret identifier cocfe (referred to in preferred embodunoits as a party identificatioa 
cocfe or PIQ which is supplied to die transferor mdepemtently of the infonnation 
exdianged with the transferor whra the transferor is makmg a transfer leqnest (for 
exanq>le, m the prefened embodhnent, die PIC is sent to die transferor by post). The 
identifier code (or at least infonnation related diereto) can be transmitted as part of die 
money transfer instiiictions through the money handling authorities. The transferor is 
required to transmit the secret identifier code to the transferee^ and the transferee is, in 
tnm, required to present the identifier code as one of tte conditions to be met before 
die money can be coUected by die transferee. Possession of die corrert ictentifier by 
the transferee rq>resents proof that tte transferee has been authorised to receive funds 
by the transferor. 

As used herein the term ''money handling authority'^ refers to any authority 
empowered to handle money and, where ai^ropriate, refers to any andiority 
empowered to provicfe funds to a transferee. Ihe term may mchide» but is not limited 
to, banks, mtemet banks, post offices, etc* 

Such a technique can avoid the need for the transferee to possess o^ial proof 
of identification, and can also improve securlQr. In particular, the local hanrfip ng agents 
at the point of sale to the transferor will not have access to sufficirat infonnation to 
receive die fimds fraudulently. 



9928872A2 I > 



SUBSTTTUTE SHEET (RUL£ 2B) 



wo 99/28872 



PCT/GB98/03537 



Preferably, ifae identifier code (PiO is allocaied for at least one of the parties to 
the tnuwfer (Le. tlw transferor aiul/or ite naiisf^ In the prefemd cinbo«fiine«, 
the identifier code (HQ the transferor, and the same CO* 
tnnsferafiran the transferor to aiqr transferee. TTiis avoids the need fornew identifier 
codes to be issued to the transferor for each transaction. 

Broadly spaddng. a second closely related aspect of the invention is to generate 
an identifier code (refcired in prefened enAodin«u,ts as a unique transaction code or 

UTC), and to provide the transferor with the code (to be forwairfed by the transferor to 
the transferee), bat provide die money handling amhority instnicted to handle the 
transfer widi second code (referred in the prefened embodiments as a transaction 
verification code or TVQ related verifiably to die idemifier code. TTie second code is 
sufficient to enable money handling amhority to veriiy diat the transferee is 
antborised to recdve the funds npon presentation of die complete code by die 
transferee. Upon collecrion of d« fonds. die money hamfling audwri^ 

complete identifier code tfirough die banldng system, as evidence tfiat die fi^ 
been coUected by the andiorised transferee. 

Such a technique can provide security against a fiaudnlem -collecrian" of die 
transfer by die money hamlling amhorities instnicted to handle die transfer, since die 
money handhng staff wiD not have access to die complete identifier code to convletc 
validly die transaction by rctoniing tfie full code as evidence of completion. If d» 
fimds are coUected fhmdulcndy by a person who has knowledge only of die second 

code (i.e. die TVC), ami has dierefore had to add a guessed code to die biowB code, 

diis will be nadUy m»ticeable wh« dm incoirect code is received back fiom the m^ 
baiKlling authori^. 

Preferably, dus a^ect of die invention fonher comprises testing, at least 
setectivcly or on demand, die fiiU klentifier code hifonnation reoinied fbr each 
completBd transim^ agamst die origmaOy aOocaied identifier code to verify dat die 
conea transferee has collected the fumis. 
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Allfaoii^ die aix>ve a^)ects can be used iDdspcsuitatiy^ particular advantages 
can be adhierved by using ti^ two aspens in combination. In particular, the technique 
can tten ensure dial neid^r the handling agents at tl^ point of sale, nor the handlmg 
agents at the point of collection, possess all of die necessary information pnqperly to 
5 complete a transfer. Only the transfimnr and die transferee possess the iiecessary codes 
(JLt. die PIC identifier code of die first aspect, and die ITTC identifier code of die 
second aspect) needed to ccHupIete the transfer. 

In a ctosely related a^^ect, the invention provkles a method of generating a first 
idaitifier code (UTC m die preferred embodiments) and a seomd code (TVC m die 
10 preferred embodiments) related thereto, the method comprismg: 

generating die first co(te such that at least oi^ character thereof rq>resents a 
fimction of one or more other characters of the first code; 

generating a second code comprismg at least one, but not all, of the characters 
of the first code, arid cornprismg mformaticm indicative of the posM 
1 5 of said at least one character smd/or of said one or more odier characters. 

Preferably, die characters of die first code are numeric. 

l^fend>iy, thefonction isachedcsnm(orsum) fimcticm. 

Preferably, the second code coiiq[irises one or more '^lank'' characters 
representing ndssmg diaracter or digit positions of the first code. 
20 Preferably, the fiinction is based on characters in one or more predetermined 

positions in the first code, and said informaticm rq)resents the position in said first code 
of the result of tte function. 

In die preferred embodiment, the furKticm is numeric sum function of die first, 
four digits in the first code, and the informatkm idratifies where the result is to be 
25 fbiuMl m dm last four digits of die first code; a first character (''F') desKMes diat die 
result b m the first om or two digits of the last four; a second charactv ("M**) denotes 
that the result is in the middle odc or two digits of the last four; and a third character 
(*L*) denotes diat die resah is m die last one or two digits of die last four. It will be 
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» '^'y >. tavouta, . ^ ^ 

PMly idoiliifcr code imnide by die traiBfette; and 

' LZT™,' code wid. , 

idenuScaBoii code provided by die tnmffcite. 

■^'J'.*«'»«W(orte,con,,,risai,e,^««,^^ 

c«fc » die i^iiiig aud^iiy » eWdenee d« d« «,i,fe^ ..^ 

lands. 

"^"y. *« ««.ciio. y«iflcaio. code eomriM s™^ 
*««-^«»«»«edo.i^^ 

ctancw h die oaiBctfon ^rificado,, eoj, 
«>n«l»iidliw ctancw <*die oaB«tf„„ 

v.Hflc«io. c„fc tachde, Irti^ado. «««taed 
*e ., . tae*», <„ ^ „^ cb^oen die «««cdo. 
code, aiid die ,»«^ 

code preMiw by die inmsSaee macbe. 
h . clo»Iy ,eb«l ^ ^ 

at least one remote input unit ODenhii> tn «mw».^ 

i~» .uuu i^iaoie to geneiate a money transfisr request in 

accoidana with in«9imation fiom a tiansfciw; and 

pnx^slng means for communicating with ead. «^ 

pioce^ing money tnmsfer requests «ccived therefiom, tiK. processing means 
compri^g: - 
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means for providmg a first identifier code assoc^led with tfae transaction and/or 
with titt identiQr of one or moie parties to tfae transfer; 

means for oo^ltmg first infonnaticm inchuDng the first id»tifier code, to be 
conmmnicaled directly or indirectty to die transferor hidepeodently of die 
5 conunnnicatkm widi the traminai; and 

means for raqnitting second infonnaticm to be supplied direcdy or indirectly to 
a money handling authority as mstnicticms to effect the transfer for collecdcm^ the 
secoiKl mfonnation inchidmg at least a portk>n of die first identifier code or infoxmatton 
related thereto to enable the authority of tte transferee to be verified. 
10 Preferably, die system uicbdes a phnality of terminais. Preferably, die 

processing means (also refened to herein as the senrer), is able to communkate widi 
each tenninal at various thnes during a woridng day, to control die tmrnnals direcdy, 
or to upload transfer re^iests (and any odier mformation) logged by the terminals iddle 
off-line (if off-line operation is siqpix>rted). 
15 In a filxther closely related aspect, the mvration provides a money transfer 

system ccm^xrisiiig: 

at kast cme remote irqpot unit operable to gn^rate a numey transfer r»piest in 
accordance with mfoimation from a transferor; ami 

processing means for communicating with each remote unit for receiving and 
20 processing money transfer requests received therefrom, wherein: 

the traninal and/or the processing means is curable to ou^mt for 
cramumicadon direct^ or mdirecdy to the transferor, an identifier code allocated to 
die mmey transfer; and 

die processing rneans is operaMe to on^mt immey transfer instmctions to be 
25 supplied directly or incfirecdy to a money having audiority as instiuctions to effect die 
trani^r for collection, the instructions mchttfing only a first portion of the idendfier 
code, whml^ tfae money handling audiority can verify a portion of the idradfier code 
presented by the transferee. 
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Preferably, the teimioal is operable to ompot tbe code to the tnmsfeior directly. 
Preferably, the tciminal is operaWe to conmnii^ 
processiDg means. 

Prefcnbfy, the system comprises means for receiying a Ml identifier code 
retomed by the money handUng amhority as evidence of completion of dn. transfer, and 

means for comparing die remined identifier code widi d» original all^ 
fltt ttansacddL 

Prcfeiably, the system coiiq>ris^ 
aUoca!ed to each tnmsactioiL 

An embodimem of the invemion is now descnT)ed, Iqr of campte only^ 
widi reference to die accompanying dfiKwmgs. in which: 

Kg. 1 is a schematic blodc diagram llhistratmg die principles nsed in 
embodiment; 

Pig. 2 is a schematic diagram iOnsirating die infonnation used in Hg. 1; 

Pig. 3 is a schematic ifiagram ilhistnaing generation of a UTC and a TVC; 
Fig. 4 is a schematic block diagram of a remote mput unit; 

Hg. 5 is a sdiematic block diagram of die central server; 
Fig. 6 is a flow diagram ilhistrating operation of die central server; 
Fig. 7 is a flow diagram iUnstrating opeiation of die second embodhnent of 
terminal; 

Fig. 8 is a flow diagram iltostntii^ hifoimation exdBngB between 
and die central server during a pollmg operation; and 

F,g. 9 is a flow diagram ilbstnting operation of die senrer for hamiling 
infonnation flom the second embodhnent of tenninal. 

Tlie principles used m dus embodhnent are fim described briefly widi reference 
10 Pigs. 1 ami 2. TTie qrstem consists of a phiraliQr of remote teimh^ 
oample, m shops and/or banks widtin a kical commmiity. n» tenninals 10 
communicate widi a cemral processor, also refened to herefaiafier as die server 12. 
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The teiminals 10 may, for exanqpie, be coiq>led to At sctvtr 12 by conventioBal 
telq)ho]ie modems whidi caQ up the server 12 to be ccmtioUed by the server IZ la 
this embodiment^ aU operatioiis and calculations are perfonned by the server 12, and 
the tenninal 10 acts as a dumb slave unit, i.e. as a remote iqxit and display device. To 

5 improve security, the server 12 may call-hack die terminal 10 at a prenlesignated 
telephone number to ensure that third paities cannot bieak into the server operation. 

When a i^w customer desires to perform a transfer, or desires to be 'logged'" 
as a customer for fiitnre transfers, diis can be doM at any terminal 10, which calls the 
snver 12 to p^form die piocess under to server's control. The customer's details 

10 incktdBng his name and address are iiq>utted through die tenninal 10 and recorded by 
die server 12 in a customer database 12. Ihe local agoit gives the customer a swipe 
card (not shown) which may be coded in any suitable manner, for exaBq>le, qrtically, 
magnetically, or cany an electronic circuit In this embodunrat, the swipe card has a 
conventional magi^tic strip on whidi is a pre-recorded code uniquely identifying die 

15 card. The cocfe also doubles as a unique identification code for tte customer (and is 
referred to later as the CIC, for customer- or card- identification code). To validate the 
card, ibt customer or tlie local agent is required to insert the card into the terminal so 
that the pre-recorded cocte can be read by the terminal's card reader (not shown) and 
communicated to die server 12 to be recorded in the customer database. 

20 Either inunediately, or at scmie time later, the server 12 allocates a party 

idemifinatiop code (PIC) for the new customer. The PIC is needed later by a transferee 
to verify diat he has been audiorised by the transferor to receive the funds. In this 
embodiment, the PIC is genmled uang a random or pseudo random generator, and 
cmisists of a numeric code, for exanqife, a four digit code, but an alpharmmerfe or 

25 purely alphabetic code could be used mstead. Hie PIC is printed using a secure postal 
printer 16, and is posted directly to the customer 14. A significant feamre is diat the 
nc is not communicated through the terminal 10, and so die local agent has no means 
of accesang a person's PIC to fraudulendy intercqjt transfers. 
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To peribim a transfer, the aistomer (tn^ 
insened into tbe lenninal's caid ie^^ This initiaies ccmimmiica^ 
tenninal 10 and tbe server 12 so tbat tbe transfer dei^ 

12. The transfer detaib inclnde the name and address of the transferee, tte 
5 l^tnmsfened. and the name and address of the bank or other mon^^ 

at which the transferee wfflcolleatfietiansfcired fends. TTie latter inlbnnalion can be 
selected fiom a list or memi of aUowable collection antborities for any paitfcolar 
coontiy ortown. 

Tl>e sciver 12 calculates die amount required to be iMid by die tnnrf^ 
10 the izansfeior pays to 4e local agem. Hie server 12 dieo allocates a transactkm 

idiffltification code for the transfer, m the foimofa unique transaction code In 

difa cmbodhnent. fl« im: is based on a pseudorandom code, which is tested to 
that it uniqaely identifies the transfer (at least for d« pM^^ 

vaHd; die same code is avaflable for refuse after tiiat period). Tbe code is numeric, bat 
13 inalteinativcembodhneniscouldbealphanmneifc.orpare n»eserv«l2 
cwnmmilcates die ITTC to die tennmal 10, and a hard copy of die transfer details. 

inchiding die UTC. is printed out by die teiinmal 10 to be giv«i to die transfero 
receipt. 

It is die tninsfcror's icsponsi^iUty to send dK PIC and die UTC to die transferee 
20 18 and to ei«.rcduit only die intended transferee receives dushrfb^^ NonnaBy 

diis wouW be done by sending die WC and die OTC by separate routes (dq>icted 

and 20b in Rg. 1). for erample. by sepanue letteis. or by commmncating one 

and die odier by telephone or telex. The UTC and die WC togedier piovide d» 

nansferee whh aB of die fafoimation needed to validate die tiansacrion. and 
25 tiansfeired fonds. 

To effect die transfer, die serverl2 communicates a transfer request 22 direcdy 
or indiiecdy (for aampte duongh a remote tcimhiaO to a conqmter 2^ 

bank (assmning diat die transfer qfstem is being rmi by an independent orp 
Bsingdiebankasanlntetmediary). The transfer request 22 inchides die transfer details 
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soi^lied by the transferor^ aiKl also includes the PIC and a transaction verification code 
(TVC). TleTVCisielatBdtotfaeirrctoenabfeverificad^ 
piesmted by the transferee, but the TVC does not itself ccHitain snfiBcient infbnnation 
to enable die original UTC to be deduced if it is not bxown. The bank computer 22 
processes Ae transfo* request and communicates the transfer infomiation 26, by 
ccmvmional bank transfer services, for exanq)le 1^ telex, or by SWIFT, to the foieign 
bank 28 nominated by the original mstiucdons fiom die transferor 14. The transfer 
information 26 sq^Iied to the foreign bank inchidcs die PIC and the tnuKated TVC. 

In order to collect the transfened fends, die transferee 18 visits the foieign bank 
28 and presents die PIC and foil UTC. Hie PIC provides evidem:e diat the person has 
been andiorised by the transferor lo receive femds, and the fell UTC provides die 
necessaiy authoiisaticm to complete die tnmsacdon. The staff at the foieign bank 28 
are able to compare transferee's UTC with the TVC with which diey have been 
supplied to verify diat die foil UTC matdies die TVC. The foreign bank 28 thm 
returns the foil UTC to the domesdc hcMue bank 24 as evidemre diat die transfer has 
be» prepay completed, and that the correct recqiient has be» paid. 

Such a system offers inqpoitant advantages over ctmventional techniques: 

(a) The transferee does not recpiire any foim of personal icfentificadon, such as a 
passport, or a driving licence. 

(b) The only parties in possession of all of the necessaiy infoimatiDn validly to 
complete a transaction are the transferor, and the transferee. Jbt agents at tte point of 
sale (10) do not have access to die PIC, since this is aDocaied direcdy by d^ seiver 12, 
and is communicated to die transferor by post The staff at the domestic home bank 24 
and at the foreign bank 28 have access to die PIC, but do not have access to die foil 
UTC. TTib wiB obstruct any fiandulcpt activiy by the handlmg a^^ 

(c) It is the responsibility of die transferor to transmit die PIC and die foil UTC to 
the transferee in a secure manner. If this mformation is intercqrted and the fonds are 
coflected faitidiilemlyly a tfaini party, then neither the money handfa nor 
the mon^ trmisfer organisation, has to aocqtt liaMlity. 
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For subsequent transfers ftom the same dansfeior 14, the drigtnal MC is 
leused. Tn>= «rver 12 n«ui«ains a database of tiansfeiDis and 
each. New PIC'S aie only allocaled. printed and posted for n«^ 
tiansfeior believes his WC to have been compnanised. 

5 ^ » «»^ror WiU only have to notify his HC to a tninsfeiee 

Once die tiansfcrce knows die WC, all he needs to receive fimds is die new UTC 
associated wid, each individual tiansaction. lids farther reduces die chances of 
infonnation being intcicq>ied between die tnmsferor 14 and the tia^^ 

There arc nmnerous techniques for generating a WC which rclales vcnfiably lo 
10 the UTC but does nm prejudice dK security of d«UTC. For cx^ 

is to tnincaie. or blank, one or more digits or diaiacieis fiom die UTC. leaving a code 
which pardy matches die &U UTC. Tie security can be imp«^ed by vaiylng die 
mnnber and/or d«. portions of d« blanked chanu^ers, so dm a peison WiU ^ 

to predict which of die characters of die code arc already known in die TVC. 
15 for ©aerating a T^^ 

digits or characters. These can eidier be inchuled in die ITTC, or diey can be mduded 
only in die TVC. Tl« security can be improved by vaiying die number and/or die 
poidtipns of die chanctCB or digits on which die checksum is based, so diat a 
wai not be able to prcdict which characters represent, or contribute to, die checksum. 

0 ^^P^^^^yprefeinxl embodiment, die TVC is generated by a combmatira 

of die above two techniques. Rcfciring to Fig 3, die UTC can consist of a 7. 8. 9 or 
10 digit code, for example die code iUustratedm Fig. 3a. This is based on a pseudt)- 
random number, but tailored such dutt die sum of die first four digits A is Rpreseaied 
somewhere in die last four digits, namely in die first one or two digits B of die last 
four, or die middle one or two digits C of die last four, or die last digit or digits D. In 
die lUustrated code, die smn (Le. 8+4+5+9=2d) Is represented in die middle two 
digits C of die last four. 

Fig. 3b aiustiaies a first TVC which may be generated fiom die inc. Hie 
TVC inctodes some of die original digits, die missmg digits bemg replaced by -bla^ 
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daiacters. The TVC also iiK:Iude5 a prefix code ''F*, **M^ or 'L" to imiicate whedm 
Ae sum is to be fband in the Fiist, Middle or Last digits of die last four digits. In tbe 
piesrat exanqple, the sum is in die middle cfigits C of the last fixir^ and diis is denoted 
m the TVC by prefix *M** It will be S4)predated that die prefix code is only inchided 
5 mtfaeTVC^andnotmdieirrc. 

When the UTC is jnesented for vraficatton» dse local bank can chedc firstly 
whether the digits in die UTC agree widi tim digits already known in die TVC, and 
secondly, whether tl^ ^n^riate checksom digits denoted by die TVC^s prefix 
correq^cmd to the sum of tbe first four digits. 

10 Fig. 3c ilfaistrates a second TVC which may be generated for the same UTC. 

The prefix co^ is, of course, die same as diat for Fig. 3b, but this »anq>le iUnstrates 
that a person cannot predict which digits are known in die TVC, since this can vaiy. 

Hie above scheme represents a balance between security and ease of veiification 
at a remote bank. Other schemes may be used whkdirecpire computer verificati^ 

15 diis could restrict die banks at which the transferee is able to collect die fiinds. 

Referring to Rg. 4, die remote nnit 10 coiiq>raes a msiin processor 30 to which 
are connected a display screm 32, a keyboard 34, a swipe card reader 38, a receqyt 
printer 40, a customer/transacticm logger 41, ami a teIq>iK>iie comimntications modem 
44 coupled through an encrypdcm/decrypdon unit 46 for ccnnmunicaiing with the server 

20 12. The dL^lay screen may, for example, be a video display unit, or it may be an 
alirfiamimeric di^lay, for ^cample, an LCD duqplay. Tbt di^lay is used to present 
messages and pron4>ts to die custimier (transferor) and/or the local agrat siq)ervisnig 
the remote terminal 10, in refuse to instmctums fiom the server 12. The details of 
die transaction and, if the cnstcmier is a new customer, die customer's details, are 

25 entered using the k^board 34. 

Hie loggm* 41 provides a summary of informatim inputted through tbe terminal 
10 during a wcnking day, so that end-of-day information can be generated and checked 
1^ tte server 12. 
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The logger 41 and flw aioypdon/deciyptioii unit 46 are Uhistiaied above as 
discrete imits for ease of dexriptioii. However/it wffl be appreciated that tbese units 
may be unbodied Iqr software ninnmg mi tlie niain processor 30. 

Refening to Pig. 5, die server 12 consists generally of a centfid piocessor unit 
5 90 to wliicii are connected a customer database 92, a transaction daia^ 

reference database 96, a PIC gnierator 98, a UnyTVC generator 100. a secure postal 
printer 102, an output system 104 (for passing transfer instiuctions Id a bank 
computer), an input cache 106. and a telephone modem 108 conuected dmngb an 
encryption/dcciyption unit 110 (which is similar to die encryption/deciyptiDn unft 46 
10 described above for the mnote termmal 10). 

The customer database 92 is a master database of aU cnstomeis (tiansfeiDis) 

who have used the system at any time. P6r each customer, die database also inctodes 
fidl name and address infonnation, at least lunited tiansaction history, and die 
customer's PIC and ac. The transaction database 94 is a master database of die 
transactions. This inchides aU pending transactions, and possibly at least a Ihnited 
history of completed transactions. The infonnation m the tiansaction database 94 may 
be archived from time to time to make more memoiy available for new transactions. 
The reference database 96 is a master database of die cuncnt reference mfoimation 
required for die transactions, inchiding. for example, die countries to which transfers 
can be sent, available recipient bank details for each country, currency exchange rates 
and commission rates. 

The secure postal printer 102 is of a known type which is able to produce sealed 
cnvek)pes coniainmg a printed sheet, it being possible to read die sheet only by 

breakmg open die sealed envelope. Such printers are used hi appKcations where it is 
desired tt> print mfoimation securely to send to a recipient, while ensuring diat tocal 
staff are unabfe to read die ccmtents of the envefepe. 

Fig. 6 iUnstrates dte operation of die server 12 once commmdcation has been 

established between a tenninal 10 and die serw 12. Step m determines whedier die 
hifonnation from die temunal 10 corresponds to a new or existing customer. This is 
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q^nient if the mfoiniatiQii contains an esdsting customer ideiitification code CIC. 
Assuming as a first case that die information does correspond to a new cn$tx»ner» dien 
die process proceeds to step 123 at which the s»ver 12 ccmtrols the terminal to prc»iqyt 
fm^ and return, ii^nitted customer infonnation^ inchiding the customer's ftll name and 
5 address. At step 124 a new customer entry is created in the custt)nier database 92. 

Rom stq> 124, tlie process proceeds to st^ 125 at which the server 12 controls 
die terminal to prompt for a new swq)e card to be mtroduced into the terminal's card 
reader 38. As explained hereinbefore, the swipe card carries a pre-recorded CIC» which 
is read by the terminal 10 and returned to the server 12. At step 126, the read CIC is 
10 recorded in the cnstcmier database. This completes the introdncdcm of a new customer 
at die terminal 10. The customer can then use die swipe card to initiate a; transfer. 

At stq> 127, a PIC is generated for the new customer by the PIC generator 98. 
As caqphumed previously, die PIC is used later by the^^ 

local bank to collect die transferred fonds. A separate PIC is generated for each 
15 customer. In the present »nbodimrat, die PIC is produced as a random or pseudo- 
random 4-digit number, so diat it is impossible to derive any relationship betwieen the 
PIC and the customer's details (whidi might otherwise enable PIC*s to be predicted by 
fraudulent parties). However, in other embodiments, the PIC could be the result of a 
checksum or hashing function carried out on the customer's name or address, so that it 
20 is possible to verify whether given PIC matches given party's name. Alternatively, it 
is possible to generate a pseudo random PIC using an encrypdon algoridmi which is 
virtually inqpossible to reverse or to predict, but whidi retauis a voifiable relationdiip 
with the parties names. Ifowever, in the presmt embodhnrat, it is assumed diat it may 
be difBcult to arrange for veriflcatioii of the PIC by the recipient's bank, and so it is 
25 jmferred to utilise a cooq>letely random PIC. 

At stqp 128, die FlC is reconted hi the customer database. The PIC is also 
printed in a sealed envetope by the secure printer 102, and the envelope is acUressed 
and posted to die customer at his home address icfentified in the customer mformatimi 
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received fam the remote tmnmal 10 (and now straed in the cnsiomer *Mtafrase 92 of 
diesnverl2). 

It win be appredaled diat steps 127 and 128 can be cairied out eidier 
immediately afta commnnicatiaii widi die teiminal 10. or at some snbseqaent time 
when the server 12 may be less busy. 

If at stq> m die received information contains an existing ac (and dtneibre 
correqxxids to an existing costomer. die process proceeds to step 130 at which die 
customer's PIC is retrieved bom die cnstomer database. At step 132, die transfer Is 
analysed to assess whedier it is a sospidoDs transfer which shoDM be stopped fo^ 
rcasms. So^idoos transfers may. fiwexanqde, be detected as any of die following: 

(9 ttansfi»s greatnr than a certain allowable amount (which may vary dqiradfaig 
cm the destination coontiy); 

(ii) rq)eatBd transfers which accamnlate to a sam greater dian an allowable 
amoont over a predeteimiiied period (die amount may vary dependmg on die 
destfnatiwi countiy); 

(iii) rqiealed transfers the fiequency of which exceeds an allowable figure 
(whidi may very dqiending on the destination country). 

The purpose of st^ 132 is to provide at least a degree of protection to prevmt 
large scale money laundering or illegal funds transfer fiom cme coomry to anod^. If a 
sa^icious tran^r is detected, dien die transfer process can be aborted, or die server 
12 can im>nq>t die teiminal 10 diat proof of identification Is required bdbie die transit 
can proceed. Details of die proof of identification (e.g. a passport number) can be 
catered at the teiminal 10 for onamnnication Wfc- to the serw IZ 

At step 134. a check » performed on whedier die customer's paymeat has yet 
deared. If cash is used to pay for die transfer, dien tins stq> can be omitted. 
Howeiver. if payment has been made by cheque, dien no transfer should be authorised 
until die cheque has been cleared by dte customer's bank, if die payment has not yet 
cleared, dten die data Is re-stored (for example, m die mput cache 106 or m a separate 
pendmg store) to be re-processed cbrhig the next day's piocessiiig. 
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Atstq>135» theUTCanddieTVCforttetrassfe Hieseccxild 
either be geimated "live*, fyr example, by soHaUe algprithms, or the UTC and the 
TVC cooki be obtained fimn a sqpply of ]m-generaled codes. Sacb codes amid be 
pie-genofated wlicn die server 12 Is not busy, for example, overnight, and stoied in 
5 suitable nmaory. 

At step 136, die UTC is ctmunanicated from tte server 12 to die terminal 10 to 
be pdnied by tte terminal's prmier 40. nds provides die custraier (transferor) widi 
the UTC to send to die transferee. 

At sicp 137, die transfer details are issued as a transfo- instruction to die 
10 ittennediary bank. The tEansfin* instmcdcms inchide die transfer details origmalty 
inputted by die cnstomi^, the PIC, and the TVC (indocfing die prefix code ''F', ''M* 
or*L-). 

At stqi 138, the transaction detaib are stored m the transaction database 94 as a 
pen£ng transaction, which completes die initial transaction procesang. Aldumgb not 

15 iUnstrated in the drawings, additional processing can be provided when the foreign 
bank returns the full UTC as evidence that the transacticm has been completed. The 
r^umed UTC can be conqKutd to tihe UTC recorded in die transaction database to 
verify that the transacticHi has been conq>leted corrtctiy* Ahematxvely, this verification 
step might only be necessary if a transferor ccmqplains of non-deliveiy of funds to die 

20 transferee, or of collection by an unauthorised person. 

In Fig. S, the ncryptkm/decrypticm unit 110, die iapat cache 106, die PIC 
generator 98, die UTC gBnerator 100, die TVC generator 101, and die databases 92, 94 
and 96 are ilhistrated as separate ''heins* from die server processor 90. Hus is merely 
to aid descr^pticm of the iiiveiitkm. It win be iqipieci^ 

25 be impkmemed by software applications nmning on the proce s s or ^ 

Atahough not ilfaistnued hi die drawings, it may also be possible for acnsttnner 
to place a telqphone order to a telqphone recqpthmist, who would dien rater die transfa^ 
detaihi uang a ctedinttc d terminal, or dncctly on to die server 12. The UTC amid be 
issued to the telqihme transferor ehher by telqihcme, or by means of the secure postal 
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primer 102. In tbe latter case» ft is pmfeiTBd that ihe OTC be pii^ 
sqaiately tarn any conunnmcaiion of a new PIC, to redoce the chances of these items 
of infonnatkm being inieieqMed togetlier. 

The above embodiment employs -onlme" operation of the tenninals 10 under 
the direct control of the scivcr 12. AU of the inibnnation processmg is canicd out by 
dje server 12. TTiis can enable rehtively inexpensive and straighlforwaid tenninals to 
be used, and it can also enable updated infonnation to be available hnmediately sbBply 
by changing the infonnation and/or the programs cm the snver. 

In an alternative embodunent. it may be desirable to provide at least some of the 
tenninals with a degree of autommiy. ibr offfine operation. Refening to Hg. 4, the 
tenninal 10 is similar to that previonsly described, but mcfaufes the followiiig units 
(shown m phantom): a mOTVC generator 48; a reference database 36; and a 
customer/transaction database 42. The reference database 36 provides reference 
ibfonnation ibr the remote tenninal, soch as details of die indSvidnal countries to which 
transfers can be sent, and die mdividual banks in each country, the exchange and 
commission rales for each country, and the lilKly tnmsfer deby for each countiy (if a 
calculation of die expected anival date of die limds is to be pnmded). The reference 
database may also inchide details of public holidays m each country, and tfus allowable 
methods of payment by die customer (for example, cash. che^. credit card, e-cash. 
mondex. etc.) and die clearance delay for each type of payment (if die calcnlaiion of 
the expected arrival date of die fimds is to be provided). The mfonnadon m die 
reference database can be updated periodical^ by die server 12. ibr example, at the 
start of a day, or during routine polling of die tenunal 10 by die server, as described 
fiirther below. 

The customer/transaction database 46 is used to store details of transfer 

requests, and details of aiqr new customers, until die mfonnation can be uploaded to die 
server 12 for action. 

Referring to Kg. 7. before a new cnsanner can use die transfer ^stem, Ae 
customer's details have to be entered hito die tenninal nsmg die keyboard (step 50). 
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The costomer ctoib iodiule die ciistoni«r*s name and address (or odier contact 
details), so diattbesecore PIC can be scat later to die coslomerb^ tbt 
cnsiomer details are dien stored in the cosloiner/tEansacdon database 42 (step 52). 
Thereafter, die costomer is issued widi a swrpt card (step 54) which cairies a nniqiie 
cnstomer i rtft ntifiratii an code (CIC), as explained previraisly. 

At stq> 56, die customer (or die local agmt) raters details of d» desired 
transfer. Such detaib inchide die name and address of die redpieot (transferee), die 
amount to be transferred (in die local cnnency of die customer), die mediod of 
paymrat by die customer, and die drstination coontrv. name and address nf tte ^M^^ nr 
odier money handling agem at whidi die redpiett win collect die tr^^ 

At step 58, die processor 30 calcukues and disptoys die vafaie of the fimds hi dm 
Rcq>ient*s cnnency, and die amoimt of commission charged, based on die infbrmadm 
stored m die refcrencc database 36. If deshed, die processor may also calculate an 
estimated date of arrival of die transfeired ihnds at die rfj-isHnatinn bank, osmg 
infonnatiim in die referoice database, and the following fonuob: 

Anival date = today's date + funds clearance delay + transfer delay + calmdar 
(holiday) delay 

If die customer agrees to die transaction and makes payment to the agent, then 
diis is confinned at step 60. (If die customer declines to proceed, dien die process can 
be aborted at diis step.) IhereaAer, at stqi 61 the UTC and TVC fer dm tiansfbr ate 
provided/generated by die UTC/TVC generator 48. Tlie UTC and TVC can eidier 
being generated 'Mve", or a pre-getterated UTC and TVC can be retrieved. Soch 
UTtTsandTVC's may eidier be generated by local generators widdn die tennmal, or 
diey m^ be downloaded fitom die server 12 as pait of die update mfinmadfm for dm 
reference database. . 

At step 62, die transfer details hichuBng die aUocated UTC are stored hi die 
customer/transacdon database 42 to await uphndmg to die server 12 for piocessmg. 



O0f9fMn9«9 I 



SUBSTITUTE SHEET (RULE 28) 



wo 99/28872 



PCT/GB98/03S37 



The tani&r details imAiding ibe ^ 

iecd|rt printer 40 to provkte a iecei|rt Wtlie co^^ 

TlK above method steps appty to a new (a^^ An eristnag cnsiDiner sinqily 

insem his or her swqw caid into the tcnnlnal's caid reader 38 (Step 

the customer number is lead fiom die caid. TOs provides suffideat mfonnatlon for 

die server 12 to access tfK customer's detaibwhi(A are stored in die server 12. After 

Step 66, d» process proceeds direcdy to stq) 56 for die customer (or agert) to enle^ 
details of the transfer, as described above. 

At various intervals during die day. die tenninal 10 is polled >y die server 12 by 
telq^ne. to i^load money^transfer Infonnadon and nev customer infeimadon to Oe 
SHver 12, and to receive new reference Infonnadon fiom die server 12. Refeinng to 
Kg. 8. when a telephone caU is received fiom die server 12 (step 70) die process 

im)ceeds to Step 172 at which ti» terminal 10 verifies dat d« can is fiom die proper 
server 12. for exampfc. by means of a secret password. The terminal also letnms a 
secret password, so diat die server 12 can verify diat it is commonicadng widi die 
proper temiiiial 10. It will be appnaated diat all informadcm seat and received 
dirongh die telephone line is conmnmicated in encrypted form, so diat die ndonnadoo 
cannot easily be mteicepted. At die tenninal end. die information is 
encrypted/decrypted by die encrypdon/deciyption unit 46 connected between die 
pnxessor 30 ami die modon 44. 

FoUowmg Step 72. die terminal waits to receive any new reference infbrmadon 
(Step 74) for die reference database 36. Suchnewuiformadoiimaybefaidiefoimofa 

replacemcm -reference- fife to overwrite dte ertire existing contents of die refcrro 
database 36. or it may be in die form of update -paclets- to replace aafy ceitain 

informadoa in die reference database. Ute new information fif any) is dten written mto 
the database. 

At Step 78. die teniunal transmits die new contents of die cosiomei/transaction 
database 42 to die server 12. Thb new hdbrmatiim inchides details of any new 
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costomers (iochidiiig the customer identification number for eadi new costonm), and 
details of transfer requests entered by tlie CDslomns. 

Stq> 80 detnmines wheOer die tominal has dosed at the end,ofdie day a^ 
so. die process jnoceeds to step 82 at which eod-of-day (EOD) mfonnation is 
5 tiaiismitted to the server IZ Tlie EOD mfonnation inchides totals iepresenttog the 
day's transactions and new customers, to provide a crosscheck diat aO of the teiminal's 
information has been validly received by die server 12. This is snbseqamdy cross- 
diedEBd by die snver 12. If die tenninal has not yet closed at die end of die day, dien 
die pn)ccss branches past step 82, ID step 84 at which die commnniearion is tennhated. 
10 The server 12 wiU nonnally poll each tenmnal 10 at several differem times 

during die day. Duiing each communication session, die teiminal tiansmits only the 
new mfoimation contained in die customer/transaction database 42 (i.e. the infoimation 
not previously commumcated to die server), in dus embodunent. die infoimation 
mnains in tiie custon^r/transaction database 42 until after die servn- 12 venuBes, for 

15 example, by means of die EOD mfonnation. diat aU of die mfonnation has been 
uploaded conecdy to die server 12. Such a technique enables all of die mfonoation to 
be uploaded to die server again if necessaiy, for example, should any disciepancies 
arise &Dm die EOD mfonnation. However, m odier embodfanents, die 
customer/transaction database 42 could be cleared after each communication session 

20 widi the server 12, if desired. 

In Fig. 4, die reicrence database 36, the customer/tnuisaction database 42, die 
enciyption/deciyption unit 46 and die UTC/TVC generator 48 have been iUustraled as 
distinct -items- fiom die processor unit 30. Thb presentation is merely schematic to 
aid description of die mvention. It wiU be appreciated diat such hems may be 
25 hnplemented as application software nm by die processor uniL The reference 
hifonnation and die customer/transaction mfonnation may be stored as files on 
conventional mass storage, for example, a semicondnctor mass memory or a magnetic 
disc. 
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In use. the s«ver 12 polls each lemoiB lennfaial 10 to download updated 
lefcrcnce mfonnatkm to the tenninaJ 10, and to uptoad new tiansfer-reqaest 
nrfbnnation and new-cnstomer iofoinwion fiom 4^ TT« comnmnicattan 

I«)ccdu«isconipten«nla,y,otf^ 

5 not«q»mfcdfimherh«e. Tl» ivbaded infoin««ion i5 sionrf 
cache 106 nmO h can be piDccssed by d» processmg iniit 90. 

Fig. 10 ilhisinues die naiaier fa which cadi -packer 
««P« cache 106 Is processed. Where appn,priaie the same reference mimends as tho« 
m Rg. 6 are used to denote an equivalent operation stq,. The fafoimatfan is findy 

read to die cache 106 at Step 120 and. as before, step 122 detennines whed^ 
infonnation con«ponds to a new customer. Assmning as a fim case flw d« 

iidbnnation does conespond to a new customer. d«n dK. process proceeds 

at which a new customer entiy is created m d« customer database M, coniam^ 
CIC read fiom die ioput cache. 

Ftam stq, 124. die process proceeds to Step 127 at which a HC is generated for 
. die cusiiMiier. 

At Step 128. die HC is primed m a sealed envelope by tf« secure printer 102 
aid d» enveh^ is addressed and po,«ed to die customer at his home add^ 

m die customer hteiarioa received fhmi die remote tennmal 10 (and now stored m 

dte customer database 92 of die senrer 12). Hu. PIC is also stored m die customer 
database 92. 

Slq> 132 iqwesems die first Step for processmg die transfer after die customer 
and «cipiem details have been stored. At step 132. die transfer is analysed to assess 

whedier it is a so^idous transfer which should be stopped for legal reasons 
explahied In more detaU hereinbefore. 

At Step 134. a d«± is peribnned on whedier d» customer's payment has yet 
cleared. Assuming diatd* payment has cleared, die process proceeds to Step 136 at 
which du. transfer detaib are issued as a transfer fastniction to die fatennedl^ 
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Hie transfer instnictums include die transfer detaik originally iqnitted by the customw^ 
die PIC, and die TVC xcceived firom he traninal 10. 

At stqp 138» tte transaction detaib aie stored in the tnmsacdon database 94 as a 
pnding transaction, which completes the initial transacdm processing. 
5 If at stq> 122, the infonnation comspoDds to an existing custCMner, the process 

proceeds to duon^ step 142 at which the esdsdng PIC for die costomer is read from 
- ibt costomer database for re-ose. The process then proceeds through step 132 for 
processing of die transfer details, as described above. 

In the above embodnnent, ibt UTC and TVC are aUocaied to the transacticm at 
10 die pomt of sale tenmnal 10, to provide olflfa^ operadon of die terminal 10, Ahfacm^ 
in the tUnstraied embodimnt, die TVC is alfocated at the tenninal, tins conld mstead 
be aUocated by the server 12, to reduce die risk diat die TVC mig^t be avaihd>le by 
tqiping into the tranmal scmiehow. 

In the above embodiments, the PIC is associated only with the transferor. In an 
15 aheinative foim, the PIC could be assodaied histead with each transferor/transferee 
pair. Thus instead of a transferor having a smgle PIC, die transferor would have 
different nC's for his different transferees. This could provide additional security if 
needed, but might require die transferor to ramember posaUy a large number of PIC^s. 
Ihe customer database would also need to store all of tl^ PIC's for each transferor, 
20 and be able to ictemiiy subsequent transacdons between the same transferor and 
transferee, m order to use die correa PIC. 

In tbt above embodm^nts, swipt card is pre-programmed with its CIC, and this 
is die only infoimatira rcqoired to be read by the tenninal. In other embodiments, the 
t ermin a l might be equqjped with a card leader/wiiter for writing information to die 
25 card as well as reading it ficom the card. Tins could enable Tfevourite recq>ient'* data to 
be stored cm tiie swipe card in order to simplify die dperatioii for the transferw. 

It wiU be appreciated that the mvratiQn, particularly as illustraied in the 
preferred embocfiments, can enable fends to be transferred in a logical and secure, 
manner, which aDows a reorient to receive the fends without having to have official 
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pioof of identity (sudi as a passport). Qi^ ibe tiaiisfen)r and tlie ininided tia^ 
have access to safBdent infonnattoa to compteie the tnoisfer. and it is tbe tiansfenir's 
le^KfflsibiliQr to eniiiiB tint tiie ii^^ 
NMiiicr tlie local liandling agent for the tiai^ 
teUBfeiee. have diiect acces to sufiBdem 

While feannes believed to he of hnporlance have been identified m die 
foiegohig description, and m tf« qjpended claims, die 

any novel idea, feamie or combination of featnies described beiem ami/or iUasdaied m 
die drawings inespective of whedier emphasfa has been placed dieieon. 
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CLAIMS 

h A method of h a ndling money transfer leqpesis m a system which inchides at 
least one input device for receiving infbnnalicm dtiecdy or indiiecdy fiom a tiansfeior, 
and pircessmg means for conmmnicatmg witfi the input device for processing money 
transfer requests therefrom, the method compiisiDg: 

receivmg at the processing means a money transfer request from the iiymt 

device; 

providing witfam the processing means a first identifier code for the transfer 
ami/or for atleastoneof the parties to die transfer; 

sending die first identifier code direcdy or indirecdy to die transferor if die fiist 
identifier code is a new code, die stmdmg operatfon to die transferor being an 
indqpendent operadcm fimn the communication with the iiqmt device; 

ODtputting money transfer msdnctions mchidmg at least a portion of die first 
idmtifier code or information related thereto; and 

comnmnicating die money transfer histructions to a money handlmg audiority as 
insomtions to effect the mon^ transfo-, whereby die audiotity of die transferee party 
to receive die funds can be verified upon presentation of the first identifier code by die 
transferee party* 

2. A mediod of operation m processing means for processing money transfer 
reqpiests, the mediod conqirising: 

receiving at the processing means information rq)resenting a money transfer 
re^iest; 

providing widiin die processing means a first identifier code associated widi die 
transfer and/or with at least one or the parties to the transfer; 

sending die first identifier code cfirccdy or mdirecdy to die tn^ first 
icfentifier code is a new code; 
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outputdng money transfer instnictions including at least a portion of the fiist 
idoitifier code or inibnnalion related tbncto; and 

co mmnnirating the money Hansfer instnictions to a money handling amfaority as 
instnictions to effect the money transfer, wbttOfy the antbonQr of the tnmsfereb paity 
5 to receive tbe funds can be verified upon presentation 
tian^ree pany. 

3. A metiiod of comnnmicaiinglnfbnnation Willi a transferor Ibr a m^ 
opetuion totnmsiormoney toatranideiee, tl^ method comprising: 

10 (a) receiving transfer instniction infiMmation directly or indirecdy fiom ihe 

transferor; 

(b) providing a first identifier code associated with die transfer and/or with 
at least one of the parties to the transfer, die code being required by the transferee to 
ccniq>leie the m(»ey transfer operation; 

" ouipnttfag or selectively ompotdng die first identifier code for 

communication to the transferor; 

wherem in step (c) the fivst identifier code is oatpotted lor confidential 

cbmmunicarion to die transferor mdependenUy of die cbnHmmicarion in step (a). 



20 



4. A mediod according to claim 3, wherein step (c) comprises selectively 
ouiputting die first identifier code if die code is newly allocalBd. 

5. A mediod according to claim 1. 2, 3 or 4, wherein die Step of providing die 
first identifier code comprises selectively allocating a new identifier code, or renising a 

25 prcvuMsly allocated identifin- code. 

6. A mediod according to claims, wherem die party identifier code isassodated 
with the tran^ror. 
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7. A medKKl accmding to daim 6, wherdn the piocea^ means cmBpiises a 
databaise of tiaiisfi»Dis» the database coniaiiuiig for each tiaiisferor the or a pax^ 
idiE»tificatkni code associated dieiewitiL 

8. A method acctndmg to any precedmg claim, wherein tfae step of alinwitfffg a 
new first identifier code comprises gnierating a landom or pseudo random code. 

9. A method accordhig to any precedmg claim, fordier comprismg generating a 
second identifier code associated whh the transaction, and ontpntting die second 
idoiti&r code to die transferor, and wherem die stq> of gnmating die mon^ tiansfer 
mstmctioos at die processmg means comprises mchidmg a verificatioo code idaled to 
die second identifier code to enable die correct second identification code to be verified 
when presmted by die transferee. 

10. A mediod accordhig to clahn 9, wherem die second identifier code is ooqnitted 
to the transferor at the or a remcMe terminal. 

11. A method of handling money transfer requests m a system which indndes 
procesang means for processing money transfer requests, the method comprismg: 

gnterating an identifier code associated widi a transfer leqoest; 

oaqmtting the identifier code for coanmimication to die transfenv; 

ontpntting fiom ibt processing means mcmey transfer instiiictioiis farimiiiig a 
voification code rehiied vrafiably to die identifier code; 

c o i mnnnirating die money transfer mstmctiwis to a money hairillng andnm^ as 
msttiicdons to effect die money oansfer, whereby die andiority of die transferee party 
ip recene die fimds can be verified at least partiy upon presentation of die origmal 
identifitf code maicfamg die hicompletB code m die nooitty transfer mstrncdnis. 
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12. A method acconfing to claim 11, wherein the identifier code is based on a 
lan&m orpsendo landoin code. 



13. A method accoiding to claim 11 or 12, wherein the momjytnmsferwi^ 
5 generated at a temiiBl remote to die processhag means, and die idcn^ 

oidpntted at die tmnhial for the tnmsferor, 

14. A medwd of opcnitiQn in a processing means for processing money tiansfe 
requests, tin mediod con^rising: 

receiving at die processing means infonnation represendng a money transfer 
reqaest; 

providing an idendfier code; 

providmg a verification code related verifiably to die idendfier code, die 
verification code being insnffideot to enable die identifier code to be deduced 
15 mBDolHgaonsly dmefiom; and 

omputting fiom die processing means money transfer instnictions including die 
uansaction verification code, for communication to a money handling audiority as 
instnictions to effect die money transfer, whereby die audiority of die transferee party 
to receive fends can be verified at least partly upon presentation of die original 
identifier code matching die verification code in die money transfer instroctions. 

15. A mediod acconfing to claim 11. 12, 13, 14 or 15. wherein die identifier code 

is generated such dial at least one character dierpof represents a fimction of one or more 
odier characters of die klentifier code, and die step of pioviding die verification code 

conq>riscs generating a code comprising at least one, but not aU. of die cfaaraden of 

die identifier code and inctodliig hifoimation indicative of die poaWoB In said identic 

code of said at least one character and/or of said one or more odier characters. 
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16. A method accoiding to claim 15» wheiein the chaiacteis in the icfendfier code 
are mmieik. 

17. A mediod accoidhig to claim IS or 16» wbmin the fimctioa is a som fimcdoii. 

5 . . . . 

18. A mediod according to claim 15, 16 or 17, wlieiein tiie verificatkm code 
conqmses one or more blanic diaractm rqnesenting missing ciiaracter or digit 
poshions of ttie identifier code. 

10 19. A method accordmg to claim 15, 16 or 17, wherein the function is based on . 
characters in cme or more predetemiined podticms in the identifier code, and said 
infomatimi rqpiesents tibe position in said identification code of the result of die 
fimction. 

15 20. A method aocoiding to any preceding claim, fimher conq)risang storing the or 
eadi identi&r code at the processing means. 

21. A mcmey transfer systrai conq>rising: 

at least cm inpat unit operable to generate a money transfer ttqptst in 
20 accordaiM:e witii infbnnation fiom a transferor; and 

imxressing means for conmnmicating with tiie or each input unit for receiving 
and prnrfi ffiing mmey transfer retpiests tfaftmfmm^ tita p mrftMing mgana c pywpnrin g: 

means for providing a fist identifier code for the transaction and/or for die one 
w more parties to the transfin:; 
25 means opmble to ou^mt first infonoutticm uichidmg the first idratifier code» to 

be camnmnicaied dfaecdy or i ud iiecdy to the tnmsfinor mdependentiy of die 
commimicatiop operation with die iiqTut unit; and 

means for ooiputting money transfer uistnictions mctading at least a poitton of 
the first identifier code or infonnaticm related diereto, for communication to a money 
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handlmg authority as instmctioiis to efiect the money transfer, wheid)y the authority of 
a transferee party to receive the foiids can be verified at least partly by piesematbn of 
die iirst ideffliifier code by tlie transferee party . 

5 22. A sy&fau according to claim 21, coiiq>iismg at least one remote iqmt unit 

73. A processbig qfsiem for use in a mcniey transfer systcan for processing nK>ney 
transfer reqfaests, the processing system conqmsing: 

means for receiving information rq>resenting a moi^y transfer request; 
10 means for pnividing a fist identiffer code associated^ 

with one or more parties to the transfer; 

means operable to output first infomiation inchiding the first identifier code, to 
be c ommu n ic a t ed dnectiy or indirectty to the transfeior; 

means for outputttng mcmey transfer instrucdons indnding at least a portum of 
15 die first identifier cocte or information related Aftmtn, for grnnmimlrtitfftfi ^ mgney 
handling andioriQr as instractiotts to effect die money transfer, wheidiy die audiority of 
a transferee paity to receive die fends can be veiified at least pardy by pre 
the first Identifier code 1^ the transferee parCy» 

20 24. A system for communicating mfoimation widi a transferor for a money txansfer 
q)eratmn to transfer money to a transferee, the system comprising: 

means for receiving transfer faistniction information directly or indirecdy fiom 
the transferor; 

means for providing a first identifier cocfe associated widi d^ transfer and/or 
25 widi at least one of die paities to die transfer, die code being required by die tiansferee 
to complete tlie money transfer operation; and 

means for onttwittinfe the first identifier code for gfmllA>ittfeii r Amiminteitift n ^ 
the transferor. 
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25. A systOT acccwding to claim 24, wberein tbe me^ 

fyr the ttansferor conqirises means for selectively ooipottiiig die fiist identifier code if 
the code is newly allocated. 

26. A system accoidiog to daim 21, 22, 23, 24 or 25, wherein the means for 
piovidiiig the fiist identifier code comprises means for selectively allocating a new 
ideiitifier code, or revising a pievkttsly allocated identifier code. 

27. A system accoiding to claim 26, wherein the first identifier code coiiq>rises a 
puty identification code associated witli the transfeiw. 

28. A system according to daim 27, wherein die processing means conqnises a 
database of transfenns, the database containmg for each tnm^ror die or a fasty 
idendficadon code allocated thereto. 

29. A qrstemactoiding to aiv of claims 21 to 28, wherein die meaiBibr allocating 

a iiew first identifier code comprises means for generating a code based on a landom or 
pseodo random code. 

30. A system according to any of claims 21 to 31, fimhcr comprisiiig means for 
generating a second identifier code assodated widi die transaction, and omputting die 
second identifier code to die transferor, and wherein die means for generating die 
money transfer instructions at die processing means comprises means for hidnding a 
verification code rdaied to die second identifier code to enable die coirect identifier 
code to be verified when presented by a oansfoee. 

31. A system accoiding to daim 32. wherehi die second identifier code is outpotted 
to the transferor at the or a remote tenninal. 
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32. Aq^stenlbrliaiidllngmoiieytraiis^ 

at feast one inimt dnice for leccw^ 
indiiectfy fitDm a transfom; 

means for alk)caimg an identifier code associated die tiansfer leqoest; 
means for ontpotting die identifier code for die tiansfeior, die code being 
required by a transferee to complete a valid money tiansier; and 

means for providing a verification code related to die identifier code, die 
verification code being insufiicient to enable die identifier code to be dedoced 
tfaerefiom unambigaoQsly, 

means for ontpuiting money iKuisfer insinictinns including dto verification code 
for conmmnication to a mcmey handling anfltority. as inslnictions to effert die mw^ 
tiansfer. whereby die andtority of a tnmsferee party to receive die funds can be v^ 
at least partly iqx)n presentation of die origmal identifier code match^ 
code m die nKm^ transfer instiuctions. 

33. A system accoidmg to clami 32. wherein die identifier code is generated as. or 
is based on. a randmn or pseudo random code. 

34. Asystemaccoiding tochum32or33, wheremdiemputdeviceisaremote 

20 tenninal. 



35. A piocessing system for piocessmg money tiansfer reii^sis. die system 

conqprising: 



15 



25 



means for itceiving infommtion lepieseiitmg a money tfansferitqnest; 
means for allocating a transaction identifier cocte fer c»mnm«i^n tfiimiy or 
indiiectly to a transfesor; 

means for providing a verification CO* 
the verification code being insnflfcicnt to enable the identifier code to be dedoced 
unambiguously theiefnnn; 
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means for ouqpottiiig money transfer instnicdons inclodtng the verificatkm code, 
for commnnicatipii to a money handling andionty as instnictions to e£kct die money 
transfer^ wheic^ die aodiori^ of die transferee party to receive fimds c^ be vnified 
at least paidy npon presentation of the origmal idradfier code matching die incon^ilete 
code in the money transfer instnictions. . 

36. A terminal for receiving money transfer requests, and for ccmmnmicating 
transfer request information to a central processor, the tennmal comprising: 

hxpot means for receiving informadon regarding the transfer and the parties lb 
thetransfei; 

means opmbk to allocate and/or to receive a transaction idootifier code; 
means for oo^iutting the transaction identifier code for communicatum to die 
transferor; 

means for storing infonnation relating to the reqpiested money transfer, said 
information including the allocated identifier code; and 

means for communicating with a said central processor. 

37. A terminal according to claim 36, wherein the iz^t device comprises a card 
reader for reading infonnation on a card presented tiiereto. 

38« A tenninai according to claim 37, wherein the card reader comprises a magnetic 
card reader. 

39. A method of handling a moi»y transfer request, conyrising: 
recehdng transfer request infonnation directly or incBrecdy fi 
altocating a transaction idemilicatioii code for the transfer request; 
providing a par^ identifier code associated with one or more parties to die 

tfitnsacrion; 
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c rnnim rnirati ng at least the tiansactioii identifier code to the transferor^ to be 
forwarded by tie transferor to die transfinee; 

c omnmni c at in g money transfer faistnictioi^ to a money handling aodiority to 
tfkct die transfer, die money transfer mstnicdons mchiding nifonnation relating to die 
transaction identifier code and hdbimation relating to die party identifier code, bat at 

least one of die codes being incomplete sDch dm dw money transfer insliuctions d^^ 
contain sufficient infonnatim to complete a valid transfer; 

whcn*y die antiiority of a transferee to receive die fhnds can be verified b^ 
money handUng audiority vpoa presentation by die transferee of die origmal transaction 
identifier code and die original party Identification code, whidi match die udbnnation 
in tte mon^ transfer mstractions. 

40. A mediod according to daun 39, wherein die step of communicating 
mfonnatioD to die transferor comprises selectively comnmnicating die party identifier 



15 code. 



41. A mediod acconfing to claim 40, wherein die step of communicating 
fflformation to die transferor comprises communicating die party identifier code if die 
par^ identifier code is newly allocated. 

42. A meduxl accordmg to daun 40 or 41, wheidn die step of communicating 

infonnation to tfie transfaor comprises not communicating die party idenrifler code if a 
party identification code has previously been attocated for an eariler transaction 

between die same parties, and is to be re-nsed for dw cunent tiansactian. 

43. A mediod according to any of dahns 47 to 49, wherem die party identification 
code, tf c ommuni ca t e d to die transferor, is communicated mdependendy of die 
nansactkm Identifier code. 



^SOOOO: •c»IIO____9«B»J2»?.t> 



SUBSIirUTB SHEET (Rin£ 26) 



wo 99/28872 



PCT/GB98A0537 



34 

44. A mesbod of tesdng infonnatioii piovkfed by a transfeiee for colfecdon of 
ionds* the mediod coiqmsi^ 

fcceiving transfiar instnictiQDs indnfling a first party idenrifier code allocated to 
at least one of the parties to the transfer, and a second transaction verificatioii code 
5 related to a transactkm idmtifi» code alhcated in tlw tranjortifin- 

(a) cnqiaiing tbe first party l&»itifiw code fixxm the transfer instmctions widi a 
party idoitifier code provided by the transferee; and 

(b) comparing the second transaction verification code wifli a transacdon 
identification code profvided by the transferee. 

10 

45. A mediod according to daim 44, farther comprising retnming the transacdon 
i d en t i fi cat io n code to die issoing anthori^ as evidence that tlie transferee is antiiorised 
to receive die funds. 

15 46. A method according to daim 44 or 45, whmein the transacten verification code 
coDlains some, but not aU of the characters of the tnmsacdon identificaticm code, and 
die method compiises coiiq>aring each known character in the transaction verificatioii 
code for e^dvalncy with a cone^)onding character of die transaction idratifier code. 

20 47. A method according to claim 44, 45 or 46, wl^rein the transaction verification 
code inchides information associated widi the result of a function based on or more 
charactm of the transai^iim icfentification code, and d» mettod ccmiprises testmg 
whedier die transaction identi&atkm code presented by die transferee matdies the 
fimcdm. 

25 

48. A mettKid or aj]parains for hamBfng money transfer ns^^ bemg substantially 
as berehibefore desoibed widi refermce to ai^ of die acarnqpanymg drawmgs. 
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